Thank you for taking the time to report this!

Originally, the hard-coded https was to satisfy the Solid spec, specifically:

2.1 HTTP Server

[..] When both http and https URI schemes are supported, the server MUST redirect all http URIs to their https counterparts using a response with a 301 status code and a Location header.

This was in part to protect unknowing users against themselves.

At some point, the issue of being able to run the solid pod over http did come up. In the Standalone PHP Server, this was resolved by allowing http by explicitly setting PROXY_MODE (see the "Usage" section).

It looks like a similar solution was omitted in this plugin 😞

I'll discuss this internally and see what resolution we come up with.

I've moved the internal discussion into the open at https://github.com/orgs/pdsinterop/discussions/2
I'll add an update here once the discussion has been resolved.

The consensus reached in the linked discussion is to remove the HTTP(S) check completely and let the server / environment decide.

Updated this patch in 4c7b29d.

Merged in #173